tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
879 Commits 2 Branches 63 Tags 18 MiB
Commit Graph

629 Commits

Author SHA1 Message Date
mboelen a3b4705508 Reordered SSH options, added ServerAliveInterval, changed TCPKeepAlive suggestion 2016-02-09 12:54:47 +01:00
mboelen 66d8ea418f Improve log file for data uploads 2016-02-02 17:08:53 +01:00
mboelen 4923ce9cb4 Added comment 2016-02-02 17:07:44 +01:00
mboelen ac5c98d76c Show what profile is used when using --config 2016-02-02 17:07:20 +01:00
mboelen 647b482c53 Use the right columns from DNF to split package name and version 2016-01-25 15:47:24 +01:00
mboelen d3e58a0537 Adjusted stderr redirecting and improve logging of packages 2016-01-25 15:38:46 +01:00
mboelen 5c53d16189 Show on screen if vulnerable packages are found 2016-01-25 15:04:46 +01:00
mboelen acafb316d3 Add warning if DNF found vulnerable packages 2016-01-25 13:57:31 +01:00
mboelen 3999be2300 Avoid errors on screen if sysctl keys are not readable 2016-01-25 13:54:09 +01:00
mboelen 727ff26283 Show on screen that DNF is being used 2016-01-25 13:52:58 +01:00
mboelen e3c88fe766 Additional DNF tests 2016-01-25 13:43:05 +01:00
mboelen 1e12852b12 Initial support for DNF package manager 2016-01-25 13:18:59 +01:00
Alexander Lobodzinski 6309588246 [ACCT-2760]: Check availability OpenBSD accounting data 2016-01-22 11:52:34 +01:00
Alexander Lobodzinski 089f7013c1 [PRNT-2302]: Description text was obviously wrong 2016-01-22 11:23:49 +01:00
pyllyukko 71aa47cbf4
Fix "/etc/inittab" -> "/etc/sysconfig/init" 2016-01-16 21:14:38 +02:00
mboelen 6bab259a5e [AUTH-9234] Gather users on AIX, and rewriting of tests 2016-01-11 01:31:08 +01:00
mboelen 5e5507a1cd Use CreateTempFile for temporary file creation 2016-01-11 01:30:06 +01:00
mboelen e0e56f2cdc Use CreateTempFile for creation of temporary files 2016-01-11 01:04:38 +01:00
mboelen 1cb90916ee Added functions and variables for creation of temporary files 2016-01-11 01:04:04 +01:00
mboelen d5867762c6 Use CreateTempFile function for temporary files 2016-01-11 00:24:00 +01:00
mboelen f313b2edf8 Allow defining a proxy for data uploads 2016-01-07 12:57:24 +01:00
mboelen 4736ad87b9 Replacement of functions and adding newlines 2016-01-07 12:56:46 +01:00
asiebelt a095ba64a0 Fix scoring logic for "<" 2016-01-02 18:13:07 +01:00
asiebelt 7f462d0a41 Fix typo 2016-01-02 18:07:02 +01:00
asiebelt 81bac124ee Fix Scoring for "<" 2016-01-02 18:03:11 +01:00
asiebelt 99fd20aae0 Fix Test Definition 2016-01-02 17:49:01 +01:00
asiebelt 4234a646ed Update tests_ssh 2016-01-02 17:39:25 +01:00
mboelen d167fe2782 Added test NETW-2600 to collect IPv6 configuration 2016-01-01 21:38:47 +01:00
mboelen 0116dac1d2 Add more aliases to --dumpoptions 2016-01-01 15:44:32 +01:00
mboelen 70c90bc8fa Added new function TestValue 2016-01-01 14:56:09 +01:00
mboelen 5b25317767 New tests and renumbering 2015-12-30 14:33:50 +01:00
mboelen 6b3c32b61f Added NETW-3032 to test for ARP monitoring software like arpwatch 2015-12-29 16:30:31 +01:00
mboelen 31b5c0bb42 Merged changes for ARPwatch 2015-12-29 16:28:18 +01:00
Michael Boelen 142fc100c4 Merge pull request #108 from alobodzinski/dovecot 
MAIL-8838: dovecot does not have postfix as a prerequisite
 2015-12-29 16:23:01 +01:00
mboelen 72b0f65438 [LOGG-2154] Check for remote syslogging, more in-depth testing 2015-12-22 16:56:15 +01:00
mboelen 95832c61d1 Update to reflect renamed functions logtext and report 2015-12-22 16:02:32 +01:00
mboelen ae6ca56581 Show warning for writable configuration file 2015-12-22 16:01:30 +01:00
mboelen 6520400ca4 [AUTH-9288] New test to determine expired passwords 2015-12-22 16:00:51 +01:00
mboelen d16b38eff8 Rename of logtext and report functions, upcoming year change 2015-12-21 21:17:15 +01:00
mboelen 83a44827e0 Define queryformat for rpm command 2015-12-21 19:20:34 +01:00
mboelen ddfd21b696 Added test for gzip to allow compression of report file 2015-12-21 19:13:50 +01:00
mboelen 360e6b66f6 Split name and version information for RPM based package manager 2015-12-21 19:10:22 +01:00
mboelen 6815c9a915 Redirect errors from postconf output 2015-12-21 17:07:31 +01:00
mboelen 9451e633da [AUTH-9308] Test for respawn option on SUSE-based systems 2015-12-21 15:17:25 +01:00
mboelen c12a4403aa Preparations for compressed uploads 2015-12-21 15:15:51 +01:00
mboelen 040c2efc1c Perform compressed uploads by default 2015-12-21 12:08:47 +01:00
mboelen ad87a83bbc Add upload_compressed option to profile 2015-12-21 11:37:16 +01:00
mboelen 4b9b8a0bc7 New option for compressed uploads 2015-12-21 11:35:38 +01:00
mboelen a59731405f Comment out unused function RealFilename 2015-12-21 11:26:00 +01:00
mboelen 526c519300 Retrieve cURL version number 2015-12-21 11:25:38 +01:00
mboelen c68771a57a Ensure that readlink only is used when it is available 2015-12-21 10:03:51 +01:00
mboelen 7cf247bf21 Added VMware detection for ESXi 2015-12-16 13:40:28 +01:00
Alexander Lobodzinski fccf889936 dovecot does not have postfix as a prerequisite 
fixed some spelling
 2015-12-14 16:14:38 +01:00
Michael Boelen c96e9f079e Merge pull request #83 from alobodzinski/auth-openbsd 
Authentication fixes for OpenBSD
 2015-12-09 22:51:00 +01:00
Michael Boelen 502f106f9a Merge pull request #96 from kboratynski/issue_11-str_1840 
Authorization check for storage devices. Approved.
 2015-12-09 22:49:23 +01:00
Michael Boelen 494ba68a6b Merge pull request #105 from kboratynski/features/ssh_refactor 
Implementation of several SSH related configuration items.
 2015-12-08 18:49:58 +01:00
mboelen 2be968eb2c Add new test BOOT-5106 to check for boot.efi on Mac OS X 2015-12-08 18:41:43 +01:00
Kamil Boratyński 8c544846ab Improved [SSH-7408] with 'AllowTcpForwarding'. 2015-12-07 07:15:48 +01:00
Kamil Boratyński 785119824e Improved [SSH-7408] with 'PermitTunnel'. 2015-12-07 07:15:03 +01:00
Kamil Boratyński 490fd6d5ec Improved [SSH-7408] with 'GatewayPorts'. 2015-12-07 07:14:19 +01:00
Kamil Boratyński 3817ffd299 Improved [SSH-7408] with 'PermitUserEnvironment'. 2015-12-06 01:46:47 +01:00
Kamil Boratyński 5487401aba Improved [SSH-7408] with 'MaxSessions'. 2015-12-06 01:46:47 +01:00
Kamil Boratyński 47576a1bd0 Improved [SSH-7408] with 'MaxStartups'. 2015-12-06 01:46:35 +01:00
Kamil Boratyński 35b663cff9 Improved [SSH-7408] with 'LoginGraceTime'. 2015-12-06 01:45:31 +01:00
Kamil Boratyński 96dfb5cf15 Improved [SSH-7408] with 'Port'. 2015-12-06 01:41:23 +01:00
Kamil Boratyński c394024769 [SSH-7408]: Implemented '!' test type. 2015-12-05 21:46:03 +01:00
Kamil Boratyński d191bed2d7 Improved [SSH-7408] with 'ClientAliveInterval'. 2015-12-05 21:37:27 +01:00
Kamil Boratyński 7bcf442a1e Improved [SSH-7408] with 'ClientAliveCountMax'. 2015-12-05 21:36:13 +01:00
Kamil Boratyński c252b9b376 Improved [SSH-7408] with 'MaxAuthTries'. 2015-12-05 21:18:35 +01:00
Kamil Boratyński 2e37c17675 [SSH-7408]: Implemented '>' test type. 2015-12-05 21:18:35 +01:00
Kamil Boratyński 9a30640327 [SSH-7408]: Implemented '<' test type. 2015-12-05 21:18:32 +01:00
Kamil Boratyński 013886ec16 Refactorized [SSH-7408]. 
First step for differents types of tests.
 2015-12-05 20:39:30 +01:00
Alexander Lobodzinski 199483bd1e Remote syslog server not detected for syslog-ng 2015-12-04 15:43:20 +01:00
mboelen 3e94c4a8f0 Added ssh_host_ed25519_key and ssh_host_ed25519_key.pub as sources to create Host ID 2015-12-04 14:25:24 +01:00
Michael Boelen e227b42eaf Merge pull request #84 from laurentquillerou/master 
Added firewire-core module detection and improvement to egrep statement
 2015-12-04 14:21:57 +01:00
mboelen 386d7701f3 New SSH options added and small changes to improve output on screen and in log file 2015-12-04 11:05:13 +01:00
Kamil Boratyński 9421feb704 Improved [SSH-7408] with 'Compression'. 2015-12-04 09:29:54 +01:00
Kamil Boratyński 201a6728b8 Improved [SSH-7408] with 'TCPKeepAlive'. 2015-12-04 02:30:28 +01:00
Kamil Boratyński 11c6b06c91 Improved [SSH-7408] with 'FingerprintHash'. 2015-12-04 02:29:18 +01:00
mboelen 7d0f5acc54 No warnings for SSH configuration, instead only use suggestions. Plus logging of details. 2015-12-03 12:15:49 +01:00
mboelen e75569babf If a suggestion has specific details, show it on screen 2015-12-03 12:14:39 +01:00
Kamil Boratyński 10b9edd8ef Improved [SSH-7408] with 'PrintLastLog'. 2015-12-03 02:37:56 +01:00
Kamil Boratyński 42a5df3796 Improved [SSH-7408] with 'X11Forwarding'. 2015-12-03 02:29:57 +01:00
Kamil Boratyński cd3cd74b8e Improved [SSH-7408] with 'UseDNS'. 2015-12-03 02:29:57 +01:00
Kamil Boratyński e656111c75 Improved [SSH-7408] with 'IgnoreRhosts'. 2015-12-03 02:29:57 +01:00
Kamil Boratyński 37ab68d501 Improved [SSH-7408] with 'PermitEmptyPasswords'. 
[SSH-7408] will verify 'PermitEmptyPasswords' option too.
 2015-12-03 02:29:57 +01:00
Kamil Boratyński 66b0ee3977 Moved [SSH-7416] into [SSH-7408]. 2015-12-03 02:29:56 +01:00
Kamil Boratyński a07c7ae4f9 Moved [SSH-7412] into [SSH-7408]. 2015-12-03 02:29:56 +01:00
Kamil Boratyński dcd8f89256 Moved [SSH-7414] into [SSH-7408]. 2015-12-03 02:29:56 +01:00
Kamil Boratyński f28fd77583 Modified [SSH-7408] -- made it widely usable. 
Modified [SSH-7408] in such a way that every option for SSH server might
be added in SSHOPS with expected (and wrong) values
(like it was described in comment).
 2015-12-03 02:29:54 +01:00
Michael Boelen 9ca47fd220 Merge pull request #86 from RebuiltBits/master 
Add Python version 2/3 detection and report it
 2015-12-02 18:06:33 +01:00
mboelen d73e79193a Test for longer status string 2015-12-02 17:50:35 +01:00
mboelen 2b101e75e8 Audit status of application firewall and added test for Mac OS X (FIRE-4532) 2015-12-02 17:37:58 +01:00
mboelen 4ab96e4f39 Improved test FIRE-4512 so that it also triggers if no more than 10 rules are found 2015-12-02 16:55:41 +01:00
mboelen 54e7f62d9a Enhancements to retrieve file permissions and related logging 2015-12-01 12:38:40 +01:00
Kamil Boratyński c1c0d722d0 Implemented ISSUE: #11 
Test [STRG-1840] checks authorization.
 2015-12-01 01:18:46 +01:00
mboelen c79a1ea3a4 Show error on screen if license server can not be contacted 2015-11-22 20:43:06 +01:00
mboelen c3054de0fe Added details to logging if upload fails 2015-11-22 19:35:34 +01:00
mboelen 391f67e7c2 Show warning if any error happened during license check 2015-11-22 19:25:32 +01:00
mboelen ce0955d05c Show warning when upload was not succesful 2015-11-22 19:05:25 +01:00